MEMORANDUM FOR: Chief, Physical Security Division 


SUBJECT : Office of Security Significant 
Accomplishments - FY 1970 


REFERENCE : Memorandum from Deputy Director 
of Security (PTOS) dated 31 July 1970; 
same subject 


1. This memorandum is for information only and is forwarded 
in response to reference. 


2. During most of FY 1970 the Information Processing Branch 
functioned as a component of the Office of Security Executive Staff 
and the latter's Executive and Planning Division. In July 1969 the 
Office of Security computer security program was expanded to three 
professional and one clerical employee. In September it was estab- 
lished as the Information Processing Branch. 


3, During FY 1970 the functions of this Branch included support 
of Agency and Community requirements for the definition of computer 
security policy and the provision of guidance in handling security 
problems involved in the utilization of modern information processing 
equipment and techniques. In addition the Branch served as a coordinat- 
ing component within the Office of Security for the imaginative 
application of modern computing techniques to OS operations; this 
latter function is implemented in coordination with the SIPS Task Force 
and the Information Processing Coordination structure of the Agency. 
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4, During the year the policy support function included the 
following activities: 


(a) Preparation and coordination within the Support 
Directorate of a proposed change in Headquarters reg- 
ulations with respect to the security considerations in 
the downgrading of computer storage media; 


(b) Drafting of a new Headquarters regulation 
assigning responsibilities within the Agency for various 
aspects of our computer security program, 


(c) Coordination within the Agency of a proposed 
Director of Central Intelligence Directive concerning 
the utilization of remotely accessed resource- sharing 
computer systems for the processing of sensitive 
compartmented information. 


5, The computer security guidance function of the Branch was 
exemplified by continuing discussions with appropriate personnel 
with reference to the security of computer operations in DDP/RID, 
NPIC, OCS, ORD, and CRS. Included in this activity was the security 
inspection and approval of the installation and operation of[ sd] 25X14 
terminal devices on Agency resource-sharing systems. In addition 
one inspection of a DDS&T contractor computer site was made and 
guidance was furnished indirectly on other Agency contractor computer 
operations. 


: 25X1 

6, During the year continuing support was provided to Community 

computer security efforts as well as planning activities having computer 
i ifi i icular note was participation in the 
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7. Continued computer security support was provided wit 
reference to the Community On-Line Intelligence System (COINS) 
and to the COMIREX National Imagery Data Base Working Group. 
The Branch continued to provide the Chairman, the CIA member, 
and the secretary for the USIB Computer Security Subcommittee. 


8, The Computer Security Subcommittee's activities during 
FY 1970 included preparation of the proposed Director of Central 
Intelligence Directive mentioned above, initial efforts for the 
development of a Community based computer security training 
course, resolution of a security problem involved in the maintenance 
of customer records on intelligence agencies| —SY 25X14 
studies of the computer storage media degaussing problem and the 
threat of hostile exploitation of Community computing operations. 


25X1 


Deputy Chief for Computer Security 
Physical Security Division 
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